mirror of
				https://github.com/wazuh/wazuh-docker.git
				synced 2025-11-03 21:43:15 +00:00 
			
		
		
		
	Compare commits
	
		
			4 Commits
		
	
	
		
			3.3.0_6.2.
			...
			2.1.0_5.5.
		
	
	| Author | SHA1 | Date | |
|---|---|---|---|
| 
						 | 
					9f192202fd | ||
| 
						 | 
					d8cd0ba7d0 | ||
| 
						 | 
					349213bac5 | ||
| 
						 | 
					8547b3b45a | 
@@ -53,8 +53,8 @@ services:
 | 
				
			|||||||
    image: wazuh/wazuh-kibana
 | 
					    image: wazuh/wazuh-kibana
 | 
				
			||||||
    hostname: kibana
 | 
					    hostname: kibana
 | 
				
			||||||
    restart: always
 | 
					    restart: always
 | 
				
			||||||
#    ports:
 | 
					    ports:
 | 
				
			||||||
#      - "5601:5601"
 | 
					      - "5601:5601"
 | 
				
			||||||
    networks:
 | 
					    networks:
 | 
				
			||||||
        - docker_elk
 | 
					        - docker_elk
 | 
				
			||||||
    depends_on:
 | 
					    depends_on:
 | 
				
			||||||
@@ -65,22 +65,6 @@ services:
 | 
				
			|||||||
    entrypoint: sh wait-for-it.sh elasticsearch
 | 
					    entrypoint: sh wait-for-it.sh elasticsearch
 | 
				
			||||||
#    environment:
 | 
					#    environment:
 | 
				
			||||||
#      - "WAZUH_KIBANA_PLUGIN_URL=http://your.repo/wazuhapp-2.1.0-5.5.1.zip"
 | 
					#      - "WAZUH_KIBANA_PLUGIN_URL=http://your.repo/wazuhapp-2.1.0-5.5.1.zip"
 | 
				
			||||||
  nginx:
 | 
					 | 
				
			||||||
    image: wazuh/wazuh-nginx
 | 
					 | 
				
			||||||
    hostname: nginx
 | 
					 | 
				
			||||||
    restart: always
 | 
					 | 
				
			||||||
    entrypoint: sh run.sh
 | 
					 | 
				
			||||||
    environment:
 | 
					 | 
				
			||||||
      - NGINX_PORT=443
 | 
					 | 
				
			||||||
    ports:
 | 
					 | 
				
			||||||
      - "80:80"
 | 
					 | 
				
			||||||
      - "443:443"
 | 
					 | 
				
			||||||
    networks:
 | 
					 | 
				
			||||||
      - docker_elk
 | 
					 | 
				
			||||||
    depends_on:
 | 
					 | 
				
			||||||
      - kibana
 | 
					 | 
				
			||||||
    links:
 | 
					 | 
				
			||||||
      - kibana
 | 
					 | 
				
			||||||
 | 
					
 | 
				
			||||||
networks:
 | 
					networks:
 | 
				
			||||||
  docker_elk:
 | 
					  docker_elk:
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -26,7 +26,7 @@ sleep 30
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
echo "Configuring defaultIndex to wazuh-alerts-*"
 | 
					echo "Configuring defaultIndex to wazuh-alerts-*"
 | 
				
			||||||
 | 
					
 | 
				
			||||||
curl -s -XPUT http://$host:9200/.kibana/config/5.5.2 -H 'Content-Type: application/json' -d '{"defaultIndex" : "wazuh-alerts-*"}' > /dev/null
 | 
					curl -s -XPUT http://$host:9200/.kibana/config/5.5.2 -d '{"defaultIndex" : "wazuh-alerts-*"}' > /dev/null
 | 
				
			||||||
 | 
					
 | 
				
			||||||
sleep 30
 | 
					sleep 30
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -1,5 +0,0 @@
 | 
				
			|||||||
FROM nginx:latest
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
RUN apt-get update && apt-get install -y openssl apache2-utils
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
COPY ./config/run.sh /run.sh
 | 
					 | 
				
			||||||
@@ -1,43 +0,0 @@
 | 
				
			|||||||
#!/bin/bash
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
set -e
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
if [ ! -d /etc/pki/tls/certs ]; then
 | 
					 | 
				
			||||||
  echo "Generating SSL certificates"
 | 
					 | 
				
			||||||
  mkdir -p /etc/pki/tls/certs /etc/pki/tls/private
 | 
					 | 
				
			||||||
  openssl req -x509 -batch -nodes -days 365 -newkey rsa:2048 -keyout /etc/pki/tls/private/kibana-access.key -out /etc/pki/tls/certs/kibana-access.pem >/dev/null
 | 
					 | 
				
			||||||
else
 | 
					 | 
				
			||||||
  echo "SSL certificates already present"
 | 
					 | 
				
			||||||
fi
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
if [ ! -f /etc/nginx/conf.d/kibana.htpasswd ]; then
 | 
					 | 
				
			||||||
  echo "Setting Nginx credentials"
 | 
					 | 
				
			||||||
  echo bar|htpasswd -i -c /etc/nginx/conf.d/kibana.htpasswd foo >/dev/null
 | 
					 | 
				
			||||||
else
 | 
					 | 
				
			||||||
  echo "Kibana credentials already configured"
 | 
					 | 
				
			||||||
fi
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
echo "Configuring NGINX"
 | 
					 | 
				
			||||||
cat > /etc/nginx/conf.d/default.conf <<EOF
 | 
					 | 
				
			||||||
server {
 | 
					 | 
				
			||||||
    listen 80;
 | 
					 | 
				
			||||||
    listen [::]:80;
 | 
					 | 
				
			||||||
    return 301 https://\$host:$NGINX_PORT\$request_uri;
 | 
					 | 
				
			||||||
}
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
server {
 | 
					 | 
				
			||||||
    listen $NGINX_PORT default_server;
 | 
					 | 
				
			||||||
    listen [::]:$NGINX_PORT;
 | 
					 | 
				
			||||||
    ssl on;
 | 
					 | 
				
			||||||
    ssl_certificate /etc/pki/tls/certs/kibana-access.pem;
 | 
					 | 
				
			||||||
    ssl_certificate_key /etc/pki/tls/private/kibana-access.key;
 | 
					 | 
				
			||||||
    location / {
 | 
					 | 
				
			||||||
        auth_basic "Restricted";
 | 
					 | 
				
			||||||
        auth_basic_user_file /etc/nginx/conf.d/kibana.htpasswd;
 | 
					 | 
				
			||||||
        proxy_pass http://kibana:5601/;
 | 
					 | 
				
			||||||
    }
 | 
					 | 
				
			||||||
}
 | 
					 | 
				
			||||||
EOF
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
echo "Starting Nginx"
 | 
					 | 
				
			||||||
nginx -g 'daemon off; error_log /dev/stdout info;'
 | 
					 | 
				
			||||||
@@ -9,7 +9,7 @@ RUN groupadd -g 1000 ossec
 | 
				
			|||||||
RUN useradd -u 1000 -g 1000 ossec
 | 
					RUN useradd -u 1000 -g 1000 ossec
 | 
				
			||||||
RUN curl --silent --location https://rpm.nodesource.com/setup_6.x | bash - &&\
 | 
					RUN curl --silent --location https://rpm.nodesource.com/setup_6.x | bash - &&\
 | 
				
			||||||
    yum install -y nodejs
 | 
					    yum install -y nodejs
 | 
				
			||||||
RUN yum install -y wazuh-manager-2.1.0 wazuh-api-2.1.0
 | 
					RUN yum install -y wazuh-manager wazuh-api
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
ADD config/data_dirs.env /data_dirs.env
 | 
					ADD config/data_dirs.env /data_dirs.env
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user